Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: SZ38h2i3KtOzwldMmt54KSbClrTFvSC9ZtCSHrIRyTQ=
Subject key identifier: 82:96:EE:EE:ED:2F:54:02:91:D2:B3:30:E2:B1:CA:77:54:C1:52:B3
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 0194BB96C3993C8E2B18EF08F841D9BF4AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 115F
Signing time: Fri 31 Jan 2025 09:00:07 +0000
Manifest this update: Fri 31 Jan 2025 09:00:07 +0000
Manifest next update: Sat 01 Feb 2025 09:00:07 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: DaGnk/erEki+5EfUX168BVLeh6TP+Xx7+T9gUob+fpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c3:99:3c:8e:2b:18:ef:08:f8:41:d9:bf:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Jan 31 09:00:07 2025 GMT
Not After : Feb 1 09:00:07 2025 GMT
Subject: CN=8296eeeeed2f540291d2b330e2b1ca7754c152b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2a:2b:bf:82:fb:53:f2:b3:36:22:36:f9:a1:
88:1c:d2:1e:b5:fb:18:a6:30:8b:e3:08:0e:33:a3:
ca:52:cd:0d:87:e3:30:f7:0f:03:4a:c5:77:2e:2d:
84:98:38:6f:52:7e:a1:57:8c:61:6a:7d:6f:c4:44:
f1:a4:3a:f5:85:3e:bf:3c:3d:c3:fc:a8:f2:36:2f:
4d:c6:96:e4:46:b4:9b:58:ce:bd:fd:8b:93:a7:fb:
04:93:76:f7:d6:d5:66:81:a5:d5:57:6e:96:6c:ca:
d3:02:82:ee:e3:fd:f3:66:95:65:59:7a:86:bf:53:
3e:9e:e6:40:bc:a0:21:0e:ce:50:84:d0:d2:2c:c0:
49:c4:8c:da:48:9a:ad:10:95:bd:f0:b5:87:10:e4:
55:4a:7d:52:85:e6:f2:06:61:cc:ec:8b:ca:ea:e9:
50:a2:0c:1c:ab:0e:1c:3e:d4:6c:ad:ab:74:ed:8d:
71:3b:32:0f:6c:57:8c:f9:49:0e:77:45:f1:3b:ab:
71:63:22:98:99:28:3b:8a:4b:e7:7e:0c:cf:c9:15:
eb:15:64:71:f7:c8:b2:e6:1b:a9:74:7c:19:5c:c7:
07:fa:b2:73:7f:5c:16:be:59:27:23:4e:0e:7b:53:
b9:e1:28:bf:0c:15:0a:d6:b8:ea:9a:cf:a7:07:5a:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:EE:EE:ED:2F:54:02:91:D2:B3:30:E2:B1:CA:77:54:C1:52:B3
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cb:0d:fa:d7:2e:5a:00:08:6c:d4:2a:86:1e:31:6c:51:60:
2e:6e:b9:2c:fb:01:a9:89:ee:b4:e2:cf:da:c6:8c:a2:71:c2:
2a:1d:04:02:05:9b:76:20:21:14:4b:e1:d9:8d:bc:cf:83:48:
11:c0:68:a6:11:b3:98:b9:01:ff:16:65:77:f1:80:b1:d2:ef:
6f:0d:31:83:e2:06:45:d6:0e:0a:2a:a3:a7:28:25:41:4a:bc:
a9:74:fb:0b:cf:48:10:2f:d7:a3:85:23:ac:ca:92:f6:a2:d8:
9c:d2:65:99:4e:96:0e:65:2c:1e:00:12:75:52:b7:51:39:90:
41:ec:97:4c:06:f2:4f:b6:e9:92:80:4b:26:17:44:2d:89:c7:
7a:ae:55:51:40:a0:bb:09:17:9f:cf:60:5d:5d:fd:36:5b:7c:
de:bb:19:57:5c:0d:7e:bd:62:4e:a3:1f:58:33:cf:24:fa:12:
45:f7:aa:ba:76:ab:41:e1:0a:01:78:9e:d4:7e:58:4f:26:01:
0c:22:a2:93:c9:21:29:31:ac:86:c3:eb:ce:2f:8e:f5:11:4c:
8c:c0:18:08:b1:96:90:8a:34:38:d1:6a:6d:87:e6:aa:e5:6b:
e9:d9:f7:d1:0b:63:1f:79:94:0e:c5:fa:1f:f8:7f:09:ef:90:
b8:77:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:48 2025 by rpki-client on console-fra.rpki-client.org